EUVD-2026-93554

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index...

Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

leftRight calc.go:14236 tests the length with countUTF16String, which counts a rune above U+FFFF as 2. The RIGHT branch on 14241 then slices runetext at utf8.RuneCountInStringtext-numChars, which counts it as 1. For text with N such runes the two measures are 2N and N, so any numChars between the...

CVE-2026-107222

The Excelize Go library, used for reading and writing Microsoft Excel spreadsheets, is vulnerable in versions 2.7.0 to 2.11.0 . The GetConditionalFormats function fails to perform sufficient length or nil checks when extracting conditional-formatting rules. Specifically, it indexes required child...

EUVD-2026-94552

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221

The Excelize Go library (versions 2.0.0 to 2.11.0 ) is vulnerable to an out-of-bounds write (CWE-787) during non-streaming worksheet read operations. The root cause lies in the checkRow function, which incorrectly sizes a target cell slice based on the last cell in XML document order. If a crafte...

MS15-034

MS15-034 MS15-034 POC "Текущая версия сервера IIS является уязвимой, так как содержит известную уязвимость CVE-2015-1635, MS15-034. Использование этой уязвимости может привести к удаленному выполнению кода или вызову синего экрана смерти. Тестовая команда : wget --header=""Range:...

robodroid

RoboDroid RoboDroid est un outil logiciel de pointe conçu pour simplifier le processus de gestion et très bientôt également de déploiement de machines Android destinées à être utilisées dans des environnements de Cyber Range. Avec RoboDroid, les utilisateurs peuvent facilement configurer et...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

attack_range

Splunk Attack Range v5 Le Splunk Attack Range construit des environnements cloud instrumentés AWS, Azure, GCP, simule des attaques et transmet les données vers Splunk pour le développement et les tests de détection. Ce qu'il fait : Construire des laboratoires — Déployer un petit laboratoire proch...

CVE-2024-29943

CVE-2024-29943 Ошибка JIT SpiderMonkey с Pwn2Own: от несоответствия диапазона целых чисел к пропуску проверки границ и RCE. Этот репозиторий содержит PoC, эксплойт и слайды анализа для CVE-2024-29943. Демо Demo.mp4 Слайды Slides.pdf Информация для воспроизведения Git-коммит Gecko:...

CVE-2017-7529

Nginx 정수 오버플로 취약점 CVE-2017-7529 취약점 정보 nginx 표준 모듈을 사용할 때 공격자는 악의적으로 구성된 range 필드를 포함한 헤더 요청을 전송하여 응답의 캐시 파일 헤더 정보를 얻을 수 있습니다. 특정 구성에서는 캐시 파일 헤더에 백엔드 서버의 IP 주소나 기타 민감한 정보가 포함될 수 있어 정보 유출이 발생할 수 있습니다. 참고: 【취약점 분석】Nginx range 필터 정수 오버플로 취약점 CVE–2017–7529 예비 분석 취약점 영향 이 취약점은 기본 구성 모듈을 사용하는 모든 0.5.6...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

hostscan

hostscan 0.2 Hostscan — это инструмент на PHP, который позволяет сканировать заданный диапазон хостов, в основном для сбора информации и проверки слабых паролей. Полагаю, это инструмент для пентеста; я создал его, чтобы автоматизировать некоторые тесты, которые часто выполняю. Поскольку он написа...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Масс-сканер для Laravel phpunit RCE CVE-2017-9841 зависимости python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Использование usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Изолированный учебный киберполигон для CVE-2025-57819 CWE-89, CWE-288. Совместимое с FreePBX учебное приложение — не официальный Sangoma FreePBX. Быстрый старт git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

CVE-2023-22515

CVE-2023-22515 Script d'exploitation Versions affectées 8.0.0=Atlassian Confluence=8.5.1 Exploitation de la vulnérabilité python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

cve-2022-42889

cve-2022-42889 cve-2022-42889 Text4Shell affecte Apache Commons Text versions 1.5 à 1.9. Il a été corrigé à partir de la version Commons Text 1.10. références : https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-docker...

RRC_steganography

RRC Steganography Rotation Range-Coding RRC Steganography — эффективный и доказуемо безопасный лингвистический стеганографический метод, который встраивает секретные сообщения в текст на естественном языке, сгенерированный большими языковыми моделями. Статья : Efficient Provably Secure Linguistic...